oidc

type Authenticator interface {
	Token(
		ctx context.Context,
		issuer string,
		clientID string,
		clientSecret string,
		options ...AuthenticatorTokenOption,
	) (string, error)
}

type AuthenticatorTokenOption func(config *clientcredentials.Config)

type CachedJwks struct {
	Jwks string
}

type Claims struct {
	Issuer  string `json:"iss"`
	Subject string `json:"sub"`
	SubJWK  string `json:"sub_jwk"` // used for self-issued tokens
}

type ParsedJWT struct {
	Claims     *Claims
	Provider   ProviderName
	CommonName string
	// contains filtered or unexported fields
}

type Parser interface {
	// VerifyJwt verifies the provided JWT signature.
	// If the JWT is not self-issued (provider = SelfProviderName) it will validate
	// the token using the public key located in the claims (sub_jwk).
	// Else, it will attempt to retrieve the JWKS from the issuer's metadata.
	VerifyJwt(ctx context.Context, jwt *ParsedJWT) error

	// Get the parsed JWT including the issuer, the subject claims
	// the common name and the provider metadata
	ParseJwt(ctx context.Context, jwtString *string) (*ParsedJWT, error)
}

type ProviderName int